Datavant · Agentic Access

Datavant Agentic Access

x-agentic-access generated

Datavant exposes 54 API operations that an AI agent could call, of which 28 are state-changing ‘acting’ operations. This is a recommended x-agentic-access execution contract — the scope, audience, consequence tier, short-lived token constraints, and escalation each action should carry before it is handed to an autonomous agent.

By consequence: 26 read, 11 write, 15 physical, and 2 safety-critical.

2 operations are classed safety-critical and should require human-in-the-loop approval at runtime.

Contracts are classified heuristically from the provider’s OpenAPI and refresh on every APIs.io network build; audience is bound per deployment. The model follows Curity’s Access Intelligence (apidays Munich 2026). Browse every provider’s agent contracts at agentic-access.apis.io.

HealthcareUnited StatesInteroperabilityHealth DataDe-IdentificationTokenizationReal-World DataRecord RetrievalData ConnectivityLife SciencesHIPAAMedical RecordsRelease of InformationPrivacyOAuth 2.0Health Information Exchange
Operations: 54 Acting: 28 Human-in-the-loop: 2 Method: generated

By consequence

read 26 write 11 physical 15 safety-critical 2

Highest-consequence actions

The physical and safety-critical operations an agent could invoke — the ones that most warrant scoped tokens, tight TTLs, and escalation. Full per-operation contracts are in the source below.

MethodPathConsequenceHuman-in-loop
POST /orders/{order_id}/dispatch safety-critical required
PUT /orders/{order_id}/start-record-retrieval safety-critical required
POST /orders/ physical conditional
POST /orders/prematch physical conditional
DELETE /orders/prematch/{order_uuid} physical conditional
PUT /orders/{order_id} physical conditional
POST /orders/{order_id}/close-request physical conditional
POST /orders/{order_id}/queries physical conditional
PUT /orders/{order_id}/queries/{query_id} physical conditional
DELETE /orders/{order_id}/queries/{query_id} physical conditional
POST /orders/{order_id}/queries/{query_id}/supporting-documents/patient-authorizations physical conditional
DELETE /orders/{order_id}/queries/{query_id}/supporting-documents/patient-authorizations physical conditional
DELETE /orders/{order_id}/queries/{query_id}/supporting-documents/patient-authorizations/{filename} physical conditional
POST /orders/{order_id}/roster physical conditional
POST /orders/{order_id}/submit physical conditional
POST /orders/{order_id}/supplemental-data physical conditional
POST /orders/{order_uuid}/cancel physical conditional

Source

Agentic Access

Raw ↑ 
generated: '2026-08-14'
method: generated
source: openapi/datavant-rest-api-openapi.yml
description: Recommended x-agentic-access execution contracts, classified heuristically from
  the OpenAPI. A governance starting point for exposing this API to AI agents — review and bind
  audience per deployment. See research/curity/agentic-governance/.
summary:
  operations: 54
  by_action_class:
    connected: 26
    acting: 28
  by_consequence:
    read: 26
    physical: 15
    safety-critical: 2
    write: 11
  human_in_the_loop_required: 2
operations:
- path: /orders/
  method: get
  operationId: list_orders_orders__get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /orders/
  method: post
  operationId: create_order_orders__post
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /orders/order
  method: get
  operationId: get_order_by_specific_id_orders_order_get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /orders/{order_id}
  method: get
  operationId: get_order_orders__order_id__get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /orders/{order_id}
  method: put
  operationId: update_order_orders__order_id__put
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /orders/order/validation/stats
  method: get
  operationId: get_order_validation_results_by_specific_id_orders_order_validation_stats_get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /orders/{order_id}/validation/stats
  method: get
  operationId: get_order_validation_results_orders__order_id__validation_stats_get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /orders/{order_uuid}/validation/report
  method: get
  operationId: get_order_validation_report_orders__order_uuid__validation_report_get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /orders/{order_uuid}/validation/supplemental-data-report
  method: get
  operationId: get_order_supplemental_data_validation_report_orders__order_uuid__validation_supplemental_data_report_get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /orders/{order_uuid}/error-and-warning-counts
  method: get
  operationId: get_order_errors_and_warnings_orders__order_uuid__error_and_warning_counts_get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /orders/{order_id}/reporting/retrievals
  method: get
  operationId: get_order_retrievals_reporting_data_orders__order_id__reporting_retrievals_get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /orders/{order_uuid}/cancel
  method: post
  operationId: cancel_order_orders__order_uuid__cancel_post
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /orders/{order_id}/close-request
  method: post
  operationId: close_order_orders__order_id__close_request_post
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /orders/{order_id}/roster
  method: post
  operationId: attach_roster_orders__order_id__roster_post
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /orders/{order_id}/supplemental-data
  method: post
  operationId: attach_supplemental_data_orders__order_id__supplemental_data_post
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /orders/{order_id}/dispatch
  method: post
  operationId: dispatch_order_orders__order_id__dispatch_post
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /orders/{order_id}/submit
  method: post
  operationId: submit_order_orders__order_id__submit_post
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /orders/{order_id}/queries
  method: get
  operationId: list_queries_orders__order_id__queries_get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /orders/{order_id}/queries
  method: post
  operationId: add_query_to_order_orders__order_id__queries_post
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /orders/{order_id}/queries/{query_id}
  method: get
  operationId: get_query_in_order_orders__order_id__queries__query_id__get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /orders/{order_id}/queries/{query_id}
  method: put
  operationId: update_query_in_order_orders__order_id__queries__query_id__put
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /orders/{order_id}/queries/{query_id}
  method: delete
  operationId: delete_query_orders__order_id__queries__query_id__delete
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /orders/{order_id}/queries/{query_id}/supporting-documents/patient-authorizations
  method: get
  operationId: list_patient_authorization_filenames_orders__order_id__queries__query_id__supporting_documents_patient_authorizations_get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /orders/{order_id}/queries/{query_id}/supporting-documents/patient-authorizations
  method: post
  operationId: create_patient_authorization_orders__order_id__queries__query_id__supporting_documents_patient_authorizations_post
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /orders/{order_id}/queries/{query_id}/supporting-documents/patient-authorizations
  method: delete
  operationId: delete_all_patient_authorizations_orders__order_id__queries__query_id__supporting_documents_patient_authorizations_delete
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /orders/{order_id}/queries/{query_id}/supporting-documents/patient-authorizations/{filename}
  method: get
  operationId: get_patient_authorization_orders__order_id__queries__query_id__supporting_documents_patient_authorizations__filename__get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /orders/{order_id}/queries/{query_id}/supporting-documents/patient-authorizations/{filename}
  method: delete
  operationId: delete_patient_authorization_orders__order_id__queries__query_id__supporting_documents_patient_authorizations__filename__delete
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /orders/prematch
  method: post
  operationId: create_prematch_order_orders_prematch_post
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /orders/prematch/all
  method: get
  operationId: list_prematch_orders_orders_prematch_all_get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /orders/prematch/{order_uuid}
  method: delete
  operationId: delete_prematch_orders_prematch__order_uuid__delete
  x-agentic-access:
    action-class: acting
    consequence: physical
    subject: required
    audience: null
    token:
      max-ttl: 300
      exchange: true
      purpose-required: true
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /orders/prematch/{order_id}/counts
  method: get
  operationId: get_prematch_result_counts_orders_prematch__order_id__counts_get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /orders/{order_id}/start-record-retrieval
  method: put
  operationId: dispatch_instructions_orders__order_id__start_record_retrieval_put
  x-agentic-access:
    action-class: acting
    consequence: safety-critical
    subject: required
    audience: null
    token:
      max-ttl: 120
      exchange: true
      purpose-required: true
      proof-of-possession: true
    escalation:
      human-in-the-loop: required
    audit: required
- path: /documents
  method: get
  operationId: list_documents_documents_get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /documents/{document_uuid}
  method: get
  operationId: download_document_documents__document_uuid__get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /configuration/
  method: get
  operationId: get_configuration_configuration__get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /configuration/
  method: put
  operationId: put_configuration_configuration__put
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /configuration/supporting-documents/letter-of-representation
  method: get
  operationId: get_letter_of_representation_configuration_supporting_documents_letter_of_representation_get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /configuration/supporting-documents/letter-of-representation
  method: put
  operationId: update_letter_of_representation_configuration_supporting_documents_letter_of_representation_put
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /configuration/supporting-documents/letter-of-representation
  method: delete
  operationId: delete_letter_of_representation_configuration_supporting_documents_letter_of_representation_delete
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /configuration/supporting-documents/health-plan-letter
  method: get
  operationId: get_health_plan_letter_configuration_supporting_documents_health_plan_letter_get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /configuration/supporting-documents/health-plan-letter
  method: put
  operationId: update_health_plan_letter_configuration_supporting_documents_health_plan_letter_put
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /configuration/supporting-documents/health-plan-letter
  method: delete
  operationId: delete_health_plan_letter_configuration_supporting_documents_health_plan_letter_delete
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /projects/
  method: get
  operationId: list_projects_projects__get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /projects/
  method: post
  operationId: create_project_projects__post
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /projects/{project_id}
  method: get
  operationId: get_project_by_id_projects__project_id__get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /projects/{project_id}
  method: put
  operationId: update_project_projects__project_id__put
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /projects/{project_id}
  method: delete
  operationId: delete_project_projects__project_id__delete
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /projects/uuid/{project_uuid}
  method: get
  operationId: get_project_by_uuid_projects_uuid__project_uuid__get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /projects/{project_id}/supporting-documents/{document_type}
  method: get
  operationId: get_supporting_document_projects__project_id__supporting_documents__document_type__get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /projects/{project_id}/supporting-documents/{document_type}
  method: put
  operationId: upload_supporting_document_projects__project_id__supporting_documents__document_type__put
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /projects/{project_id}/supporting-documents/{document_type}
  method: delete
  operationId: delete_request_letter_projects__project_id__supporting_documents__document_type__delete
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required
- path: /projects/{project_id}/queries/{query_id}/visits/{visit_uuid}
  method: get
  operationId: get_visit_details_projects__project_id__queries__query_id__visits__visit_uuid__get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /projects/{project_id}/queries/{query_id}/visits
  method: get
  operationId: get_query_visits_projects__project_id__queries__query_id__visits_get
  x-agentic-access:
    action-class: connected
    consequence: read
    subject: optional
    token:
      max-ttl: 3600
    audit: none
- path: /oauth2/token
  method: post
  x-agentic-access:
    action-class: acting
    consequence: write
    subject: required
    audience: null
    token:
      max-ttl: 900
    escalation:
      human-in-the-loop: conditional
      triggers:
      - abnormal
      - high-value
    audit: required